On Mon, 30 Jun 2003, Jay Mashl wrote: > On Fri, 20 Jun 2003, Jeff Squyres wrote: > > On Thu, 19 Jun 2003 [EMAIL PROTECTED] wrote: > > > > approach. Instead, just use ssh directly -- OSCAR should have setup ssh > > properly such that you don't need passwords to login between nodes and > > it should function "close enough" to what rsh/rlogin do that your users > > won't care. > > There is the opposite side to this issue as well. Users running programs > independent of the queue tends to defeat the "fair use" principles behind the > queueing system. And it make node loads too high for users using PBS to get > any substantial compute time. > > That said, given that OSCAR uses ssh for communication, how does one configure > the compute nodes to block direct ssh access but allow PBS to operate normally? > That is, how should ssh be configured (I assume sshd_config) to force users to > run jobs through the queueing system? I have tried to do this once, but ended > up blocking all users and root from remote access to the nodes.
Please forgive some of the details missing - I'm on a borrowed machine, so can't check everything. Doing what you are asking is possible, but can be kind of tricky. The possible solutions include modifying /etc/passwd, using PAM, or using some other similar trickery. I tried once to use PAM, but my cluster only has 4-6 users, so it wasn't worth the hassle. When you can fire nerf balls at the offender without getting up from your seat, policy seems to work ok :). Anyway, I might recommend looking at the PAM solutions out there. Google turned up a few, or Argonne has a list of utilities for PBS: http://www-unix.mcs.anl.gov/openpbs/ Hope this helps somewhat... Brian -- Brian Barrett LAM/MPI developer and all around nice guy Have a LAM/MPI day: http://www.lam-mpi.org/ ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Oscar-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/oscar-users
